HackerOne
@HackerOne
11.1K subscribers
644 photos
31 videos
79 files
2.75K links
Community : @Sec0x01
@Bug0x
Download Telegram
About
Blog
Apps
Platform
Join
HackerOne
11.1K subscribers
HackerOne
👍15😁7🔥4👌1
3.04K viewsAmir Kiani, 
HackerOne
https://book.hacktricks.xyz/pentesting-web/file-upload
❤1👍1🙏1
2.71K viewsAmir Kiani, 
HackerOne
https://www.youtube.com/watch?v=81PsbDKhoBY
YouTube
HOW ANTI-CHEAT BYPASSES WORK
To try everything Brilliant has to offer—free—for a full 30 days, visit https://brilliant.org/cazz/. The first 200 of you will get 20% off Brilliant’s annual premium subscription.

💎 Source code is available for my Patrons!
https://www.patreon.com/cazzwastaken…
👍3❤2🙏2
2.89K viewsAmir Kiani, 
HackerOne
https://github.com/joshuafuller/ATAK-Maps
GitHub
GitHub - joshuafuller/ATAK-Maps: A collection of maps for use in ATAK
A collection of maps for use in ATAK. Contribute to joshuafuller/ATAK-Maps development by creating an account on GitHub.
👍5❤2🙏2
2.53K viewsAmir Kiani, 
HackerOne
https://www.youtube.com/watch?v=EB9sqPvlLlE
👍3❤2🙏2
2.7K viewsAmir Kiani, 
HackerOne
https://www.youtube.com/watch?v=LfaMVlDaQ24
YouTube
Harvard CS50 (2023) – Full Computer Science University Course
Learn the basics of computer science from Harvard University. This is CS50, an introduction to the intellectual enterprises of computer science and the art of programming. The course is taught live every year and this is the 2023 version.

💻 Slides, source…
👍5🙏3❤2
2.7K viewsAmir Kiani, 
HackerOne
#CVE-2024-3400 #RCE #Palo_Alto_OS

https://github.com/W01fh4cker/CVE-2024-3400-RCE

https://github.com/h4x0r-dz/CVE-2024-3400
GitHub
GitHub - W01fh4cker/CVE-2024-3400-RCE-Scan: CVE-2024-3400-RCE
CVE-2024-3400-RCE. Contribute to W01fh4cker/CVE-2024-3400-RCE-Scan development by creating an account on GitHub.
👍5❤2🙏2
3.37K viewsAmir Kiani, 
HackerOne
CVE-2024-2448:
Authenticated Command Injection In Progress Kemp LoadMaster
https://rhinosecuritylabs.com/research/cve-2024-2448-kemp-loadmaster
Rhino Security Labs
CVE-2024-2448: Authenticated Command Injection In Progress Kemp LoadMaster
This blog covers 2 vulnerabilities discovered by Rhino Security Labs in Kemp LoadMaster load balancers: CVE-2024-2448 and CVE-2024-2449.
👍7❤5🙏2
3.61K viewsAmir Kiani, 
HackerOne
https://badoption.eu/blog/2023/06/21/dumpit.html
BadOption.eu
Obfuscated LSASS dump command
Obfuscated LSASS dumper command A quick walkthrough for a obfuscated PowerShell LSASS dump command via comsvcs.dll. tl;dr Malicious command detection for PowerShell is not easy. Pretty hard to tell, what the following command is going to do, huh? &$env:?…
❤1🙏1👌1
3.42K viewsAmir Kiani, 
HackerOne
Exploit Development

https://0xninjacyclone.github.io/posts/exploitdev_1_intro/

https://0xninjacyclone.github.io/posts/exploitdev_2_stack/

https://0xninjacyclone.github.io/posts/exploitdev_3_heap/

https://0xninjacyclone.github.io/posts/exploitdev_4_binfiles/

https://0xninjacyclone.github.io/posts/exploitdev_5_winpe/

https://0xninjacyclone.github.io/posts/exploitdev_6_elf/

https://0xninjacyclone.github.io/posts/exploitdev_7_strfmt/

https://0xninjacyclone.github.io/posts/exploitdev_8_bor/
👍5❤4🔥4
3.59K viewsAmir Kiani, 
HackerOne
https://sha256algorithm.com/
Sha256Algorithm
Sha256 Algorithm Explained
Sha256 algorithm explained online step by step visually
👍10❤1🙏1
3.42K viewsAmir Kiani, 
HackerOne
https://twitter.com/Katan0x/status/1785354774864400732
X (formerly Twitter)
Katan0x (@Katan0x) on X
In my recent red team project, i faced an MFA product securing RDP, ADFS, and Exchange. It seemed secure until I found vulnerabilities, including one that exposed TOTP QR codes for any user.
#Cybersecurity #RedTeam #PenetrationTesting
👍5❤2🔥2
3.4K viewsEhsan, 
HackerOne
https://medium.com/@red.whisperer/5-methods-i-use-to-discover-apis-6d646baa3ffb
Medium
5 Methods I Use To Discover APIs
While working on a target, some of the most interesting parts to test is its API. APIs are dynamics, they get updated more often then…
👍3❤2👌2
3.19K viewsAmir Kiani, 
HackerOne
https://medium.com/@h4x0r_dz/23000-for-authentication-bypass-file-upload-arbitrary-file-overwrite-2578b730a5f8
Medium
23000$ for Authentication Bypass & File Upload & Arbitrary File Overwrite
How I found Authentication Bypass >> File upload vulnerability >> Arbitrary File Overwrite and how I managed I found the path of the file…
👍5🙏2❤1
3.29K viewsAmir Kiani, 
HackerOne
https://www.youtube.com/watch?v=suABtb8_2Zk
YouTube
How To Reverse Engineering Denuvo V4 by Voksi - HD
VIdeo of Voksi showing us how he can reverse engineering Denuvo V4 (in HD)
👍5❤4👌3
3.68K viewsAmir Kiani, 
HackerOne
#fun
#helldivers2
#sony
😁8🤯2🤩1
3.66K viewsAmir Kiani, 
HackerOne
New Scam Method for fragment Numbers
👍5❤4😁1👌1
3.7K viewsAmir Kiani, 
HackerOne
https://github.com/AiGptCode/WordPress-Auto-Admin-Account-and-Reverse-Shell-cve-2024-27956
GitHub
GitHub - AiGptCode/WordPress-Auto-Admin-Account-and-Reverse-Shell-cve-2024-27956: WordPress Auto Admin Account Creation and Reverse…
WordPress Auto Admin Account Creation and Reverse Shell cve-2024-27956 automates the process of creating a new administrator account in a WordPress site and executing a reverse shell on the target ...
👍4❤2👌1
3.74K viewsAmir Kiani, 
HackerOne
https://github.com/truonghuuphuc/CVE-2024-27956
GitHub
GitHub - truonghuuphuc/CVE-2024-27956: CVE-2024-27956 WordPress Automatic < 3.92.1 - Unauthenticated SQL Injection
CVE-2024-27956 WordPress Automatic < 3.92.1 - Unauthenticated SQL Injection - truonghuuphuc/CVE-2024-27956
❤1👍1👌1
3.99K viewsAmir Kiani, 
HackerOne
https://www.telemetryapp.io
Telemetry
Telemetry provides the most advanced search and analytics capabilities for telegram data
👍2❤1👌1
4K viewsMmD,